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DETAILED ACTION 

This action is in response to the papers filed 8/12/2009 



Response to Arguments 

Applicant's arguments with respect to the "cryptographic processor 
communicating with said user network interface using Media Independent Interface 
(MM), and said cryptographic processor communicating with said network 
communications interface using the MM and said cryptographic module and said 
communication module communication to transfer encrypted data and communication 
module configuration operations there between" have been fully considered but they are 
not persuasive. Dellmo clearly teaches in figure 7 and paragraph 0050 that control and 
gateway circuit 73 controls the transfer of data and the configuration operation between 
the cryptographic module and said communication module. Boucher teaches said 
cryptographic processor communicating with said user network interface using a Media 
Independent Interface (MM), and said cryptographic processor communicating with said 
network LAN interface using the MM (see Boucher column 17 lines 9-34). It would have 
been obvious at the time the invention was made to a person having ordinary skill in the 
art to which said subject matter pertains to have used Media Independent Interface 
because of it commercially available physical layer chips that support number of 
different conduits, such as twisted pair, coaxial cable or optical fiber (see Boucher 
column 17 lines 9-34). Therefore one would have been motivated to have used Media 
Independent Interface. 
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Applicant's arguments, with respect to the cryptographic module and the 
communications module removably coupled have been fully considered and are 
persuasive. Therefore, the rejection has been withdrawn. However, upon further 
consideration, a new ground(s) of rejection is made in view of in view of Cheng (U.S. 
2003/0221034). 



Claim Rejections - 35 USC § 103 

The text of those sections of Title 35, U.S. Code not included in this action can 
be found in a prior Office action. 

Claims 1-3, 7-11, 21, 22, 26-29, 30, 34-37 and 39 are rejected under 35 U.S.C. 
103(a) as being unpatentable over Dellmo (U.S. 2002/0095594) in view of Cheng (U.S. 
2003/0221034) in view of Boucher et at (U.S. 6,427,173). 

Dellmo teaches a cryptographic device comprising: a cryptographic module (see 
paragraph 0038 i.e. cryptography circuit 70) and a communications module (see 
paragraph 0038 i.e. wireless transceiver 50) coupled thereto (see figure 7); said 
cryptographic module comprising a user network interface (see paragraph 0034 i.e. 
interface connector 27 may be a PCMCIA connector or other similar connector that can 
readily interface to a number of possible LAN devices as will be appreciated by those 
skilled in the art) and a cryptographic processor (see paragraph 0047 i.e. cryptography 
processor 72) coupled thereto (see figure 7); said communications module comprising a 
network communications interface (see paragraph 0035 and 0041-0046) coupled to 
said cryptographic processor (see figure 7); said cryptographic module and said 
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communication module communication to transfer encrypted data and communication 
module configuration operations there between (see paragraph 0050). 

Dellmo does not teach the modules removably coupled thereto and said 
cryptographic processor communicating with said user network interface using Media 
Independent Interface (MM), and said cryptographic processor communicating with said 
network communications interface using the MM. 

Cheng teaches the modules are removably coupled thereto (see paragraph 
0028-0030). It would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains to have made the 
communications module removable coupled with the cryptographic module to allow the 
user to change the module based on changing requirements (see paragraph 0030). 
Therefore one would have been motivated to have made the communications module 
removable coupled with the cryptographic module. 

Boucher teaches said cryptographic processor communicating with said user 
network interface using Media Independent Interface (MM), and said cryptographic 
processor communicating with said network communications interface using the MM 
(see Boucher column 17 lines 9-34). It would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject 
matter pertains to have used Media Independent Interface because of it commercially 
available physical layer chips that support number of different conduits, such as twisted 
pair, coaxial cable or optical fiber (see Boucher column 17 lines 9-34). Therefore one 
would have been motivated to have used Media Independent Interface. 
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With respect to claims 2, 22, 29, and 38 the cryptographic device wherein said 
user network interface and said network communications interface both comprise Local 
Area Network (LAN) interfaces (see Dellmo paragraph 0034 and 0035) 

With respect to claims 3, 30, and 39 wherein said cryptographic processor 
comprises: a host network processor (see Dellmo figure 2 element 25 and paragraph 
0035 it is inherent that the computer station has a processor since unencrypted data 
called "plain text" is generated at the station 25) communicating with said user network 
interface using the MM (see Dellmo paragraph 0040 and Boucher column 17 lines 9-34); 
and a cryptography circuit (see Dellmo paragraph 0047-0050 i.e. field programmable 
gate array) communicating with said host network processor using the MM (see Dellmo 
paragraph 0050 and Boucher column 17 lines 9-34). 

With respect to claim 7, 26, and 34, Cheng teaches wherein said 
communications module is removable coupled to said cryptographic module; and 
wherein said communications module comprises a predetermined one from among a 
plurality of interchangeable communications modules each for communicating over a 
different communications media (see paragraph 0029-0030). It would have been 
obvious at the time the invention was made to a person having ordinary skill in the art to 
which said subject matter pertains to have made the communications module 
removable coupled with the cryptographic module to allow the user to change the 
module based on changing requirements (see paragraph 0030). Therefore one would 
have been motivated to have made the communications module removable coupled 
with the cryptographic module. 
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With respect to claim 8, wherein said network communications interface 
comprises a wireless LAN (WLAN) communication circuit (see Dellmo figure 4 and 
paragraph 0035 and 0041-0046). 

With respect to claims 9, wherein said network LAN interface comprises a 
wireline LAN communication circuit (see paragraph 0036). 

With respect to claims 10, wherein said network communications interface 
comprises a fiber optic communication circuit (see Boucher column 17 lines 9-34). 

With respect to claim 1 1 , wherein said user network interface comprises an 
Ethernet interface (see paragraph 0035-0036). 

With respect to claim 21 , a communications method comprising: coupling a 
cryptographic module (see paragraph 0038 i.e. cryptography circuit 70) to a network 
device (see figure 4), the cryptographic module comprising a user network interface 
(see paragraph 0034 i.e. interface connector 27 may be a PCMCIA connector or other 
similar connector that can readily interface to a number of possible LAN devices as will 
be appreciated by those skilled in the art) and a cryptographic processor (see 
paragraph 0047 i.e. cryptography processor 72) coupled thereto (see figure 7); 
providing a communications module (see paragraph 0038 i.e. wireless transceiver 50) 
comprising a network communications interface (see paragraph 0035 and 0041-0046) 
coupled to the cryptographic processor (see figure 7); and using the network 
communications interface to communicate with a network (see figure 4 paragraph 
0035); using the cryptographic module and said communication module to 
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communication to transfer encrypted data and communication module configuration 
operations there between (see paragraph 0050) 

Dellmo does not teach removable coupling cryptographic module to a network 
device; using the cryptographic processor to communicate with the user network 
interface and the network communications interface using a Media Independent 
Interface (MM). 

Cheng teaches the modules are removably coupled thereto (see paragraph 
0028-0030). It would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains to have made the 
communications module removable coupled with the cryptographic module to allow the 
user to change the module based on changing requirements (see paragraph 0030). 
Therefore one would have been motivated to have made the communications module 
removable coupled with the cryptographic module. 

Boucher teaches using the cryptographic processor to communicate with the 
user network interface and the network communications interface using a Media 
Independent Interface (MM) (see Boucher column 17 lines 9-34). It would have been 
obvious at the time the invention was made to a person having ordinary skill in the art to 
which said subject matter pertains to have used Media Independent Interface because 
of it commercially available physical layer chips that support number of different 
conduits, such as twisted pair, coaxial cable or optical fiber (see Boucher column 17 
lines 9-34). Therefore one would have been motivated to have used Media Independent 
Interface. 



Application/Control Number: 10/806,937 Page 8 

Art Unit: 2432 

With respect to claims 27, wherein the network communications interface 
comprises at least one of a wireless Local Area Network (WLAN) communication circuit, 
a wireline communication circuit, and a fiber optic communication circuit (see figure 4 
and paragraph 0035 and 0041-0046). 

With respect to claim 28, a communications system comprising: a plurality of 
network devices (see figure 4 element 25) coupled together to define a network (see 
figure 4), and a cryptographic device (see figure 4 element 20) removably coupled to at 
least one of said network devices; said cryptographic device comprising a cryptographic 
module (see paragraph 0038 i.e. cryptography circuit 70) coupled to said at least one 
network device (see figure 2, and a communications module (see paragraph 0038 i.e. 
wireless transceiver 50) coupled to said cryptographic module (see figure 7); said 
cryptographic module comprising a user network interface (see paragraph 0034 i.e. 
interface connector 27 may be a PCMCIA connector or other similar connector that can 
readily interface to a number of possible LAN devices as will be appreciated by those 
skilled in the art) and a cryptographic processor (see paragraph 0047 i.e. cryptography 
processor 72) coupled thereto (see figure 7); said communications module comprising a 
network communications interface (see paragraph 0035 and 0041-0046) coupled to 
said cryptographic processor (see figure 7); said cryptographic module and said 
communication module communication using the MM to transfer encrypted data and 
communication module configuration operations therebetween. 

Dellmo does not teach the cryptographic module and the communications 
module ar removably coupled thereto and said cryptographic processor communicating 
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with said user network interface using Media Independent Interface (MM), and said 
cryptographic processor communicating with said network communications interface 
using the Mil. 

Cheng teaches teach the cryptographic module and the communications module 
ar removably coupled thereto (see paragraph 0029-0030). It would have been obvious 
at the time the invention was made to a person having ordinary skill in the art to which 
said subject matter pertains to have made the communications module removable 
coupled with the cryptographic module to allow the user to change the module based on 
changing requirements (see paragraph 0030). Therefore one would have been 
motivated to have made the communications module removable coupled with the 
cryptographic module. 

Boucher teaches said cryptographic processor communicating with said user 
network interface using Media Independent Interface (MM), and said cryptographic 
processor communicating with said network communications interface using the MM 
(see Boucher column 17 lines 9-34). It would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject 
matter pertains to have used Media Independent Interface because of it commercially 
available physical layer chips that support number of different conduits, such as twisted 
pair, coaxial cable or optical fiber (see Boucher column 17 lines 9-34). Therefore one 
would have been motivated to have used Media Independent Interface. 

With respect to claims 35, wherein the network communications interface 
comprises at least one of a wireless Local Area Network (WLAN) communication circuit, 
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a wireline communication circuit, and a fiber optic communication circuit (see figure 4 
and paragraph 0035 and 0041-0046). 

With respect to claims 36, wherein said user network interface comprises an 
Ethernet interface (see paragraph 0035-0036). 

With respect to claim 37, a cryptographic module comprising: a user network 
interface (see paragraph 0034 i.e. interface connector 27 may be a PCMCIA connector 
or other similar connector that can readily interface to a number of possible LAN 
devices as will be appreciated by those skilled in the art); and a cryptographic processor 
(see paragraph 0047 i.e. cryptography processor 72) removably coupled to said user 
network interface (see figure 7); said cryptographic module and said communication 
module communication using the Mil to transfer encrypted data and communication 
module configuration operations therebetween. 

Dellmo does not teach the cryptographic module and the communications 
module ar removably coupled thereto and said cryptographic processor communicating 
with said user network interface using Media Independent Interface (MM), and said 
cryptographic processor communicating with said network communications interface 
using the Mil. 

Cheng teaches teach the cryptographic module and the communications module 
ar removably coupled thereto (see paragraph 0029-0030). It would have been obvious 
at the time the invention was made to a person having ordinary skill in the art to which 
said subject matter pertains to have made the communications module removable 
coupled with the cryptographic module to allow the user to change the module based on 



Application/Control Number: 10/806,937 Page 1 1 

Art Unit: 2432 

changing requirements (see paragraph 0030). Therefore one would have been 
motivated to have made the communications module removable coupled with the 
cryptographic module. 

Boucher teaches said cryptographic processor communicating with said user 
network interface using Media Independent Interface (MM), and said cryptographic 
processor communicating with said network communications interface using the MM 
(see Boucher column 17 lines 9-34). It would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject 
matter pertains to have used Media Independent Interface because of it commercially 
available physical layer chips that support number of different conduits, such as twisted 
pair, coaxial cable or optical fiber (see Boucher column 17 lines 9-34). Therefore one 
would have been motivated to have used Media Independent Interface. 

Claims 12, 13, 15-20 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Dellmo (U.S. 2002/0095594) in view of Boucher et at (U.S. 6,427,173) in further 
view of Nguyen (U.S. 2002/0001307) 

With respect to claim 12 Dillmo teaches a cryptographic device comprising: a 
cryptographic module (see paragraph 0038 i.e. cryptography circuit 70) and a 
communications module (see paragraph 0038 i.e. wireless transceiver 50) coupled 
thereto (see figure 7); said cryptographic module comprising a user Local Area Network 
( LAN) interface (see paragraph 0034 i.e. interface connector 27 may be a PCMCIA 
connector or other similar connector that can readily interface to a number of possible 
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LAN devices as will be appreciated by those skilled in the art) and a cryptographic 
processor (see paragraph 0047 i.e. cryptography processor 72) coupled thereto (see 
figure 7); said communications module comprising a network LAN interface (see 
paragraph 0035 and 0041-0046) coupled to said cryptographic processor (see figure 7). 
said cryptographic module and said communication module communication to transfer 
encrypted data and communication module configuration operations there between (see 
paragraph 0050) 

Dillmo does not teach said cryptographic processor communicating with said 
user network interface using a Media Independent Interface (Mil), and said 
cryptographic processor communicating with said network LAN interface using the Mil 
and said cryptographic module and said communications module both operating using 
at least one unique external media access control (MAC) address, and at least one 
fixed internal MAC address. 

Boucher teaches said cryptographic processor communicating with said user 
network interface using a Media Independent Interface (MM), and said cryptographic 
processor communicating with said network LAN interface using the MM (see Boucher 
column 17 lines 9-34). It would have been obvious at the time the invention was made 
to a person having ordinary skill in the art to which said subject matter pertains to have 
used Media Independent Interface because of it commercially available physical layer 
chips that support number of different conduits, such as twisted pair, coaxial cable or 
optical fiber (see Boucher column 17 lines 9-34). Therefore one would have been 
motivated to have used Media Independent Interface. 
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Nguyen teach said cryptographic module and said communications module both 
operating using at least one unique external media access control (MAC) address (see 
Nguyen paragraph 0864 i.e. external MAC address), and at least one fixed internal 
MAC address (see Nguyen paragraph 0864 internal addresses (i.e. IEEE assigned 
MAC addresses)). It would have been obvious at the time the invention was made to a 
person having ordinary skill in the art to which said subject matter pertains to have used 
MAC addresses to guarantee the identity of each network device in the network. 
Therefore one would have been motivated to have used MAC address for 
authentication. 

With respect to claim 13, wherein said cryptographic processor comprises: a host 
network processor (see Dillmo figure 2 element 25 and paragraph 0035 it is inherent 
that the computer station has a processor since unencrypted data called "plain text" is 
generated at the station 25) communicating with said user network interface using the 
Mil (see Dillmo paragraph 0040 and Boucher column 17 lines 9-34); and a cryptography 
circuit (see paragraph 0047-0050 i.e. field programmable gate array) communicating 
with said host network processor using the Mil (see Dillmo paragraph 0050 and 
Boucher column 17 lines 9-34). 

With respect to claims 15, wherein communications to and from said encrypted 
data buffer and said unencrypted data buffer use MM (see Boucher column 17 lines 9- 
34). 

With respect to claim 16, wherein said communications module is removable 
coupled to said cryptographic module; and wherein said communications module 
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comprises a predetermined one from among a plurality of interchangeable 
communications modules each for communicating over a different communications 
media (see paragraph 0029-0030). 

With respect to claims 17, wherein said network communications interface 
comprises a wireless LAN (WLAN) communication circuit (see Dillmo figure 4 and 
paragraph 0035 and 0041-0046). 

With respect to claims 18. The cryptographic device of claim 12 wherein said 
network LAN interface comprises a wireline LAN communication circuit (see Dellmo 
paragraph 0036). 

With respect to claims 19, wherein said network communications interface 
comprises a fiber optic communication circuit (see Boucher column 17 lines 9-34). 

With respect to claims 20, wherein said user network interface comprises an 
Ethernet interface (see paragraph 0035-0036). 

Claims 25, 33, and 42 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Dellmo (U.S. 2002/0095594) in view of Cheng (U.S. 2003/0221034) 
in view of Boucher et at (U.S. 6,427,173) in further view of Nguyen (U.S. 
2002/0001307). 

With respect to claim 25, 33, and 42 Dellmo Cheng and Boucher does not teach 
said cryptographic module and said communications module both operate using at least 
one unique external media access control (MAC) address, and at least one fixed 
internal MAC address. Nguyen teach said cryptographic module and said 



Application/Control Number: 10/806,937 Page 15 

Art Unit: 2432 

communications module both operating using at least one unique external media 
access control (MAC) address (see Nguyen paragraph 0864 i.e. external MAC 
address), and at least one fixed internal MAC address (see Nguyen paragraph 0864 
internal addresses (i.e. IEEE assigned MAC addresses)). It would have been obvious at 
the time the invention was made to a person having ordinary skill in the art to which said 
subject matter pertains to have used MAC addresses to guarantee the identity of each 
network device in the network. Therefore one would have been motivated to have used 
MAC address for authentication. 

Claims 4, 5, 14, 23, 24, 31, 32, 40 and 41 are rejected under 35 U.S.C. 103(a) as 
being unpatentable over Dellmo (U.S. 2002/0095594) in view of Cheng (U.S. 
2003/0221034) in view of Boucher et at (U.S. 6,427,173) in view of Hashimoto (U.S. 
4,907,275). 

Dellmo Cheng and Boucher teaches everything with respect to claim 1,21, 28, 
and 37 but with respect to claims 4, 31 , and 40, Dellmo does not teach wherein said 
cryptographic processor further comprises: an encrypted data buffer circuit coupled 
between said user network interface and said cryptography circuit; and an unencrypted 
data buffer circuit coupled between said cryptography circuit and said network 
communications interface. Hashimoto teaches wherein said cryptographic processor 
further comprises: an encrypted data buffer circuit (see figure 2B element 16) coupled 
between said user network interface (see figure 2B element 12) and said cryptography 
circuit (see figure 2B element 15); and an unencrypted data buffer circuit (see figure 2B 
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element 14) coupled between said cryptography circuit (see figure 2B element 15) and 
said network communications interface (see figure 2B element 12). It would have been 
obvious at the time the invention was made to a person having ordinary skill in the art to 
which said subject matter pertains to have encrypted data buffer circuit and an 
unencrypted data buffer circuit to help control the data flow into and out of the 
cryptography circuit, (see column 3 line 57 - column 4 line 2). Therefore one would 
have been motivated to have an encrypted data buffer circuit coupled between said 
user network interface and said cryptography circuit; and an unencrypted data buffer 
circuit coupled between said cryptography circuit and said network communications 
interface. 

With respect to claims 5, 32 and 41 wherein communications to and from said 
encrypted data buffer and said unencrypted data buffer use the Mil (see Dillmo 
paragraph 0040 and Boucher column 17 lines 9-34). 

With respect to claims 14 Dellmo Cheng and Boucher do not teach wherein said 
cryptographic processor further comprises: an encrypted data buffer circuit coupled 
between said user network interface and said cryptography circuit; and an unencrypted 
data buffer circuit coupled between said cryptography circuit and said network 
communications interface. Hashimoto teaches wherein said cryptographic processor 
further comprises: an encrypted data buffer circuit (see figure 2B element 16) coupled 
between said user network interface (see figure 2B element 12) and said cryptography 
circuit (see figure 2B element 15); and an unencrypted data buffer circuit (see figure 2B 
element 14) coupled between said cryptography circuit (see figure 2B element 15) and 
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said network communications interface (see figure 2B element 12). It would have been 
obvious at the time the invention was made to a person having ordinary skill in the art to 
which said subject matter pertains to have encrypted data buffer circuit and an 
unencrypted data buffer circuit to help control the data flow into and out of the 
cryptography circuit, (see column 3 line 57 - column 4 line 2). Therefore one would 
have been motivated to have an encrypted data buffer circuit coupled between said 
user network interface and said cryptography circuit; and an unencrypted data buffer 
circuit coupled between said cryptography circuit and said network communications 
interface. 

With respect to claims 23, wherein the cryptographic processor comprises a host 
network processor (see Dillmo figure 2 element 25 and paragraph 0035 it is inherent 
that the computer station has a processor since unencrypted data called "plain text" is 
generated at the station 25) communicating with said user network interface using the 
MM (see Boucher column 17 lines 9-34); and a cryptography circuit (see Dillmo 
paragraph 0047-0050 i.e. field programmable gate array) communicating with said host 
network processor using the MM (see Boucher column 17 lines 9-34); an encrypted data 
buffer circuit (see Hashimoto figure 2B element 16) coupled between the user network 
interface (see Hashimoto figure 2B element 12) and the cryptography circuit (see 
Hashimoto figure 2B element 15); and an unencrypted data buffer circuit (see 
Hashimoto figure 2B element 14) coupled between the cryptography circuit (see 
Hashimoto figure 2B element 15) and the network communications interface (see 
Hashimoto figure 2B element 12). 
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With respect to claims 24. The cryptographic device of claim 4 wherein 
communications to and from said encrypted data buffer and said unencrypted data 
buffer use the MM (see Dellmo paragraph 0040). 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Devin Almeida whose telephone number is 571-270- 
1018. The examiner can normally be reached on Monday-Thursday from 7:30 A.M. to 
5:00 P.M. The examiner can also be reached on alternate Fridays from 7:30 A.M. to 
4:00 P.M. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron, can be reached on 571-272-3799. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. 

/Devin Almeida/ 
Examiner, Art Unit 2432 



/Gilberto Barron Jr./ 

Supervisory Patent Examiner, Art Unit 2432 



